Vulnerability Details CVE-2020-1707
A vulnerability was found in all openshift/postgresql-apb 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the container openshift/postgresql-apb. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 11.6%
CVSS Severity
CVSS v3 Score 7.0
CVSS v2 Score 4.4
References
Products affected by CVE-2020-1707
-
cpe:2.3:a:redhat:openshift:4.0
-
cpe:2.3:a:redhat:openshift:4.1
-
cpe:2.3:a:redhat:openshift:4.1.37
-
cpe:2.3:a:redhat:openshift:4.2
-
cpe:2.3:a:redhat:openshift:4.2.21